#cwe-287
共收录 1099 条相关情报。
← 返回所有主题 漏洞预警2026-05-04 发布INFO
CVE-2026-7723
A flaw has been found in PrefectHQ prefect up to 3.6.13. Affected is an unknown function of the file /api/events/in of t
历史摘要 · 未重新核验 · NVD
漏洞预警2026-05-04 发布INFO
CVE-2026-7722
A vulnerability was detected in PrefectHQ prefect up to 3.6.21. This impacts the function endswith of the file /api/heal
历史摘要 · 未重新核验 · NVD
漏洞预警2026-05-04 发布MEDIUM
CVE-2026-7714
CVE-2026-7714 影响 Calibre-Web-Automated 4.0.6 及更早版本,该软件是一个基于 Calibre 的电子书管理自动化工具。漏洞位于 cps/cwa_functions.py 文件的 Admin Endp
历史摘要 · 未重新核验 · NVD
安全公告2026-05-04 发布INFO
CVE-2026-7710
A security flaw has been discovered in YunaiV yudao-cloud up to 3.8.0. This affects the function doFilterInternal of the
历史摘要 · 未重新核验 · GitHub Advisory
漏洞预警2026-05-04 发布INFO
CVE-2026-7710
A security flaw has been discovered in YunaiV yudao-cloud up to 3.8.0. This affects the function doFilterInternal of the
历史摘要 · 未重新核验 · NVD
安全公告2026-05-03 发布INFO
CVE-2026-7679
A security flaw has been discovered in YunaiV yudao-cloud up to 2026.01. This impacts the function getAccessToken of the
历史摘要 · 未重新核验 · GitHub Advisory
漏洞预警2026-05-03 发布INFO
CVE-2026-7679
A security flaw has been discovered in YunaiV yudao-cloud up to 2026.01. This impacts the function getAccessToken of the
历史摘要 · 未重新核验 · NVD
安全公告2026-05-02 发布INFO
CVE-2026-7630
A vulnerability has been found in innocommerce InnoShop up to 0.7.8. The affected element is the function InstallService
历史摘要 · 未重新核验 · GitHub Advisory
漏洞预警2026-05-02 发布HIGH
CVE-2026-7630
CVE-2026-7630 影响 innocommerce 开发的 InnoShop 电子商务平台(版本 ≤0.7.8)。漏洞位于安装组件的 InstallServiceProvider::boot 函数(文件 innopacks/inst
历史摘要 · 未重新核验 · NVD
安全公告2026-04-30 发布INFO
CVE-2026-42560
### Summary
The Patreon OAuth provider maps every authenticated Patreon account to the same local `user.ID`, instead of
历史摘要 · 未重新核验 · GitHub Advisory
安全公告2026-04-29 发布INFO
CVE-2026-41671
## Summary
The OIDC token introspection endpoint (`/modules/sso/index.php/oidc/introspect`) always returns `{"active":
历史摘要 · 未重新核验 · GitHub Advisory
安全公告2026-04-28 发布INFO
CVE-2026-35579
### Summary
The gRPC, QUIC, DoH, and DoH3 transports in CoreDNS incorrectly handle TSIG authentication.
For gRPC and Q
历史摘要 · 未重新核验 · GitHub Advisory
安全公告2026-04-28 发布INFO
CVE-2026-33190
### Summary
CoreDNS' tsig plugin can be bypassed on non-plain-DNS transports because it trusts the transport writer's Ts
历史摘要 · 未重新核验 · GitHub Advisory
漏洞预警2026-04-27 发布INFO
CVE-2026-41081
Improper Handling of TLS Client Authentication Failure Leading to Anonymous Principal Assignment in Apache Storm
Versio
历史摘要 · 未重新核验 · NVD
漏洞预警2026-04-27 发布INFO
CVE-2026-7113
A vulnerability was found in NousResearch hermes-agent 0.8.0. Affected by this issue is some unknown functionality of th
历史摘要 · 未重新核验 · NVD
漏洞预警2026-04-27 发布INFO
CVE-2026-7112
A vulnerability has been found in NousResearch hermes-agent 0.8.0. Affected by this vulnerability is the function _check
历史摘要 · 未重新核验 · NVD
漏洞预警2026-04-02 发布HIGH
CVE-2026-34121
An authentication bypass vulnerability within the HTTP handling of the DS configuration service in TP-Link Tapo C520WS v
来源摘录 · NVD
漏洞预警2023-12-13 发布MEDIUM
CVE-2023-49646
Improper authentication in some Zoom clients before version 5.16.5 may allow an authenticated user to conduct a denial o
来源摘录 · NVD
漏洞预警2013-07-31 发布HIGH
CVE-2013-2056
A flaw was found in Red Hat Network Satellite. The Inter-Satellite Sync (ISS) operation, which synchronizes data between
来源摘录 · NVD